Error while using ADO Migration Tool

[vsasmal]

PAT has full access. verified multiple ways.

Command - devopsmigration execute --config Configuration.json

Error -

[11:47:14 INF] [16.1.0] Azure DevOps Migration Tools [Object Model]
[11:47:14 INF] [16.1.0] 16.1.0
[11:47:14 INF] [16.1.0] naked Agility with Martin Hinshelwood
[11:47:14 INF] [16.1.0] ===============================================================================
[11:47:14 INF] [16.1.0] --------------------------------------
[11:47:14 INF] [16.1.0] Telemetry Note:
[11:47:14 INF] [16.1.0] We use Application Insights to collect usage and error information in order to improve the quality of the tools.
[11:47:14 INF] [16.1.0] Currently we collect the following anonymous data:
[11:47:14 INF] [16.1.0] -Event data: application version, client city/country, hosting type, item count, error count, warning count, elapsed time.
[11:47:14 INF] [16.1.0] -Exceptions: application errors and warnings.
[11:47:14 INF] [16.1.0] -Dependencies: REST/ObjectModel calls to Azure DevOps to help us understand performance issues.
[11:47:14 INF] [16.1.0] This data is tied to a session ID that is generated on each run of the application and shown in the logs. This can help with debugging. If you want to disable telemetry you can run the tool with '--disableTelemetry' on the command prompt.
[11:47:14 INF] [16.1.0] Note: Exception data cannot be 100% guaranteed to not leak production data
[11:47:14 INF] [16.1.0] --------------------------------------
[11:47:14 INF] [16.1.0] Start Time: 04/01/2025 11:47:14
[11:47:14 INF] [16.1.0] Running with settings: {"ConfigFile": "Configuration.json", "DisableTelemetry": false, "DebugTrace": false, "skipVersionCheck": false, "$type": "ExecuteMigrationCommandSettings"}
[11:47:14 INF] [16.1.0] OSVersion: Microsoft Windows NT 6.2.9200.0
[11:47:14 INF] [16.1.0] Version (Assembly): 16.1.0
[11:47:14 INF] [16.1.0] Logpath: C:\Users********\Downloads\MigrationTools-16.1.0\logs\20250401114714
[11:47:15 WRN] [16.1.0] You are either not online or have chosen skipVersionCheck. We will not check for a newer version of the tools.
_
___ __ __ ___ ___ _ _ | |_ ___
/ _ \ \ / / / _ \ / | | | | | | | / _
| / > < | / | ( | || | | | | /
_| /_/_\ _| _| _,| __| _|

[11:47:16 INF] [16.1.0] No validator found for processor type TfsTestVariablesMigrationProcessorOptions
[11:47:16 INF] [16.1.0] No validator found for processor type TfsTestConfigurationsMigrationProcessorOptions
[11:47:16 INF] [16.1.0] No validator found for processor type TfsTestPlansAndSuitesMigrationProcessorOptions
[11:47:16 INF] [16.1.0] Creating Migration Engine f86593ad-4e50-4450-95d8-31acbf7ef033
[11:47:16 INF] [16.1.0] ProcessorContainer: Of 4 configured Processors only 4 are enabled
[11:47:16 INF] [16.1.0] ProcessorContainer: Adding Processor TfsWorkItemMigrationProcessor
[11:47:16 INF] [16.1.0] FieldMappingTool: Adding FieldMap FieldLiteralMap for SomeWorkItemType
[11:47:17 INF] [16.1.0] ProcessorContainer: Adding Processor TfsTestVariablesMigrationProcessor
[11:47:17 INF] [16.1.0] ProcessorContainer: Adding Processor TfsTestConfigurationsMigrationProcessor
[11:47:17 INF] [16.1.0] ProcessorContainer: Adding Processor TfsTestPlansAndSuitesMigrationProcessor
[11:47:17 INF] [16.1.0] Logging has been configured and is set to: unknown.
[11:47:17 INF] [16.1.0] Max Logfile: Verbose.
[11:47:17 INF] [16.1.0] Max Console: Debug.
[11:47:17 INF] [16.1.0] Max Application Insights: Error.
[11:47:17 INF] [16.1.0] The Max log levels above show where to go look for extra info. e.g. Even if you set the log level to Verbose you will only see that info in the Log File, however everything up to Debug will be in the Console.
[11:47:17 INF] [16.1.0] Beginning run of 4 processors
[11:47:17 INF] [16.1.0] Processor: TfsWorkItemMigrationProcessor
[11:47:17 INF] [16.1.0] Migration Context Start: TfsWorkItemMigrationProcessor
[11:47:17 INF] [16.1.0] Connecting with AccessToken
Error logged to Elmah.io!
!! Check for latest version - We fix issues constantly - If not, please create a discussion on https://github.com/nkdAgility/azure-devops-migration-tools/discussions so we can get this fixed !!
[11:47:17 ERR] [16.1.0] Unable to configure store: Check persmissions and credentials for AccessToken: TF400324: Azure DevOps services are not available from server https://dev.azure.com/*********/.
Technical information (for administrator):
The underlying connection was closed: An unexpected error occurred on a send.
[11:47:17 ERR] [16.1.0] The PAT MUST be 'full access' for it to work with the Object Model API.

configuration.json

{
"Serilog": {
"MinimumLevel": "Information"
},
"MigrationTools": {
"Version": "16.1",
"Endpoints": {
"Source": {
"EndpointType": "TfsTeamProjectEndpoint",
"Collection": "https://dev.azure.com/*********/",
"Project": "AIPlatform",
"Authentication": {
"AuthenticationMode": "AccessToken",
"AccessToken": ""
},
"ReflectedWorkItemIdField": "Custom.ReflectedWorkItemId",
"LanguageMaps": {
"AreaPath": "Area",
"IterationPath": "Iteration"
}
},
"Target": {
"EndpointType": "TfsTeamProjectEndpoint",
"Collection": "https://dev.azure.com/**********/",
"Project": "AIPlatform_Test",
"Authentication": {
"AuthenticationMode": "AccessToken",
"AccessToken": ""
},
"ReflectedWorkItemIdField": "Custom.ReflectedWorkItemId",
"LanguageMaps": {
"AreaPath": "Area",
"IterationPath": "Iteration"
}
}
},
"Processors": [
{
"ProcessorType": "TfsWorkItemMigrationProcessor",
"Enabled": true,
"UpdateCreatedDate": true,
"UpdateCreatedBy": true,
"WIQLQuery": "SELECT [System.Id] FROM WorkItems WHERE [System.TeamProject] = @teamproject AND [System.WorkItemType] NOT IN ('Test Suite', 'Test Plan','Shared Steps','Shared Parameter','Feedback Request') ORDER BY [System.ChangedDate] desc",
"FixHtmlAttachmentLinks": true,
"WorkItemCreateRetryLimit": 5,
"FilterWorkItemsThatAlreadyExistInTarget": false,
"GenerateMigrationComment": true,
"SourceName": "Source",
"TargetName": "Target"
},
{
"ProcessorType": "TfsTestVariablesMigrationProcessor",
"Enabled": true,
"Processor": "TestVariablesMigrationContext",
"SourceName": "Source",
"TargetName": "Target"
},
{
"ProcessorType": "TfsTestConfigurationsMigrationProcessor",
"Enabled": true,
"SourceName": "Source",
"TargetName": "Target"
},
{
"ProcessorType": "TfsTestPlansAndSuitesMigrationProcessor",
"Enabled": true,
"PrefixProjectToNodes": false,
"OnlyElementsWithTag": null,
"TestPlanQuery": null,
"RemoveAllLinks": false,
"MigrationDelay": 0,
"UseCommonNodeStructureEnricherConfig": false,
"NodeBasePaths": [],
"AreaMaps": null,
"IterationMaps": null,
"RemoveInvalidTestSuiteLinks": false,
"FilterCompleted": false,
"SourceName": "Source",
"TargetName": "Target"
}
],
"CommonTools": {
"FieldMappingTool": {
"Enabled": true,
"FieldMaps": [
{
"FieldMapType": "FieldLiteralMap",
"targetField": "Custom.SomeField",
"value": "New field value",
"ApplyTo": [
"SomeWorkItemType"
]
}
]
}
}
}
}

[MrHinsh]

Two common causes:

1. You are restricted elsewhere buy your organsiation either in Entra ID or in Azure DevOps directly.
2. The organisation name or project name is incorrect.

[vsasmal]

Organization name is correct as well as project name too.
What do we mean by restricted in Entra ID or ADO? How can I check that? Any command to test?

[MrHinsh]

Your company can add limits to PAT tokes in both Entra ID and ADO. There is no command to test.

Check policies: https://learn.microsoft.com/en-us/azure/devops/organizations/accounts/manage-pats-with-policies-for-administrators?view=azure-devops
Also see: https://kasunrajapakse.me/a-guide-to-implementing-aad-entra-policies-for-enhanced-security-and-compliance-a0df6733e48a

[vsasmal]

Company policies were restricting to access the tool.